Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
File:                     c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa (raw, json)
Hash identifier:          ll96Vlhl3AmgIywYXruKPzQKXtLUiNhC9v0cT/qDqtc=
Subject key identifier:   71:BB:8E:FA:EB:D6:88:E9:58:7A:23:E9:5D:79:BD:11:D7:DD:4E:C6
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584B8EACD38BE11144ADD9F980C0
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     15344
IP address blocks:        24.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d3:8b:e1:11:44:ad:d9:f9:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=f3102046-61fa-4a76-9892-555149b87393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:70:92:25:bb:30:52:8a:f4:bd:c8:a4:83:
                    0d:30:bc:6b:e9:27:a9:07:e1:fc:48:29:3e:8d:e7:
                    e8:e3:5f:52:d7:86:45:74:99:42:a6:1e:4c:8a:e0:
                    df:fa:35:0d:91:be:26:61:90:e3:91:a6:88:ab:19:
                    27:1e:e5:70:aa:3d:e6:0f:36:6e:27:48:c2:8b:5e:
                    78:a0:02:17:99:cb:0a:a2:09:48:f3:b1:2e:66:e8:
                    1f:d3:be:20:e1:9d:a1:15:b4:2a:18:f2:8d:fd:72:
                    0d:55:f3:10:02:bc:71:8b:0f:e4:ae:15:bf:64:0a:
                    e8:c7:cf:f2:39:d0:2b:91:19:0c:67:54:ac:fc:d3:
                    cc:66:8e:cf:f3:7f:db:78:13:78:fd:4a:8d:28:48:
                    76:73:1e:fa:4c:2c:ce:b5:07:86:f2:1c:32:78:b5:
                    b1:8d:54:e1:c5:ed:b5:70:90:e5:e2:72:83:3c:5b:
                    f7:bf:80:8b:4c:12:69:56:7b:d8:7b:89:e5:7f:53:
                    ba:28:67:14:eb:d5:3f:f2:49:7e:0f:0b:c7:03:66:
                    81:fd:98:45:f4:7d:f0:76:f0:21:a7:d7:c5:d8:02:
                    c6:e6:88:b0:db:2e:73:9a:82:5a:79:87:e4:c7:5f:
                    b2:7e:f9:43:b4:6e:6e:78:55:34:c0:f7:dc:23:50:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:8E:FA:EB:D6:88:E9:58:7A:23:E9:5D:79:BD:11:D7:DD:4E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.92.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:bd:4e:17:5a:06:fe:56:f9:03:fd:83:d1:4d:d4:db:d1:
         fe:5b:f2:8b:f7:87:30:25:5c:13:96:05:24:b5:d0:13:c9:ed:
         9b:15:9a:83:36:ea:c3:07:53:e2:d4:cd:5c:ae:be:90:f5:9b:
         48:bd:fc:29:d7:1f:2a:31:ae:76:d0:01:74:82:5e:d2:64:9a:
         c8:e5:c2:06:26:48:16:37:6d:17:f2:96:dc:9b:24:68:ce:db:
         a3:2c:cb:94:a0:a0:52:76:a3:0c:ad:72:bb:84:42:e7:8a:d8:
         19:57:61:bd:98:cb:4e:ec:b2:2a:be:44:36:09:0f:c7:30:d4:
         93:51:46:e9:58:71:f0:d0:77:74:57:8f:05:df:35:d0:e5:40:
         e4:97:52:b9:76:4c:5b:99:99:54:12:92:45:e1:d2:20:18:41:
         08:65:77:25:fe:44:5a:01:e7:a5:e4:64:fb:ab:61:8e:eb:b7:
         f5:ce:04:8e:4a:e6:98:5b:6a:7d:ac:05:72:ac:ea:3d:a9:45:
         24:41:cb:ae:f7:75:32:46:a2:24:0f:23:bd:1f:ca:08:96:92:
         ab:d8:84:dc:4a:b2:43:bb:c9:80:db:26:10:0a:34:29:bd:c3:
         f1:a1:09:77:de:72:40:d1:c3:9b:6e:ad:67:58:6e:13:72:24:
         c5:8d:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:35:16 2025 by rpki-client